In July 2026, Trend Micro, Tanium, ESET, and Tenable released patches addressing severe security vulnerabilities in their products. Tenable fixed CVE-2026-15265, a critical path traversal vulnerability in Tenable Agent potentially enabling remote code execution. ESET patched a high-severity local privilege escalation in Inspect Connector for Windows caused by improper authentication of Advanced Local Procedure Call (ALPC) requests, and also addressed a medium-severity denial of service issue in its Linux security products. Tanium fixed a high-severity denial of service vulnerability in Tanium Server exploitable by unauthenticated network attackers. Trend Micro patched a high-severity local privilege escalation in Cleaner One Pro that could allow deletion of privileged files. While no current exploitation is reported, prior incidents indicate attackers target security products. Palo Alto Networks also released multiple patches this month for various vulnerabilities.

The vulnerabilities could allow attackers to perform remote code execution (Tenable Agent), local privilege escalation (ESET Inspect Connector and Trend Micro Cleaner One Pro), and denial of service attacks (Tanium Server and ESET Linux products). Successful exploitation may lead to unauthorized access, elevated privileges, disruption of security services, or deletion of critical security files. No confirmed exploitation in the wild has been reported for these specific vulnerabilities at this time.

All affected vendors have released patches addressing these vulnerabilities. Users should apply the latest product updates from Trend Micro, Tanium, ESET, and Tenable promptly to remediate these issues. There is no indication that additional mitigation steps beyond patching are required. Monitor vendor advisories for any further updates.